BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- Shodan-Dorks - Dorks for Shodan; a powerful tool used to search for Internet-connected devices
- Pegasus-Pentest-Arsenal - A Comprehensive Web Application Security Testing Toolkit That Combines 10 Powerful Penetration Testing Features Into One Tool
- Witcher - Managing GitHub Advanced Security (GHAS) Controls At Scale
- ByeDPIAndroid - App To Bypass Censorship On Android
- API-s-for-OSINT - List Of API's For Gathering Information About Phone Numbers, Addresses, Domains Etc
- Firecrawl-Mcp-Server - Official Firecrawl MCP Server - Adds Powerful Web Scraping To Cursor, Claude And Any Other LLM Clients
- Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
- CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents
- Liam - Automatically Generates Beautiful And Easy-To-Read ER Diagrams From Your Database
- SubGPT - Find Subdomains With GPT, For Free
Exploit DB
- [remote] Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
- [local] VirtualBox 7.0.16 - Privilege Escalation
- [webapps] WordPress Depicter Plugin 3.6.1 - SQL Injection
- [local] Microsoft Windows 11 Pro 23H2 - Ancillary Function Driver for WinSock Privilege Escalation
- [webapps] SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation
- [webapps] ERPNext 14.82.1 - Account Takeover via Cross-Site Request Forgery (CSRF)
- [webapps] Casdoor 1.901.0 - Cross-Site Request Forgery (CSRF)
- [webapps] Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference (IDOR)
- [local] Daikin Security Gateway 14 - Remote Password Reset
- [local] ZTE ZXV10 H201L - RCE via authentication bypass
Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT
/in General NewsRussia’s Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets.
The post Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT appeared first on SecurityWeek.
SecurityWeek – Read More
Are Long-Lived Credentials the New Achilles’ Heel for Cloud Security?
/in General NewsDatadog advises Australian and APAC companies to phase out long-lived cloud credentials.
Security | TechRepublic – Read More
UnitedHealthcare CEO Brian Thompson shot and killed in New York
/in General NewsBrian Thompson, the CEO of UnitedHealthcare, was fatally shot in Midtown Manhattan early Wednesday morning while walking toward the New York Hilton Midtown for his company’s annual investor conference. According to emerging media reports, Thompson was fired on from roughly 20 feet away by a masked gunman who appeared to be waiting for Thompson and […]
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
She Was a Russian Socialite and Influencer. Cops Say She’s a Crypto Laundering Kingpin
/in General NewsWestern authorities say they’ve identified a network that found a new way to clean drug gangs’ dirty cash. WIRED gained exclusive access to the investigation.
Security Latest – Read More
Ransomware hackers target NHS hospitals with new cyberattacks
/in General NewsTwo NHS trusts in England have been hacked in recent weeks, the latest attacks to hit the national health service.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
CISA, FBI Issue Guidance for Securing Communications Infrastructure
/in General NewsThe caution comes after Chinese-state-affiliated breaches of American telecommunication networks. Organizations with Cisco infrastructure should take particular note.
Security | TechRepublic – Read More
Navigating the Changing Landscape of Cybersecurity Regulations
/in General NewsThe evolving regulatory environment presents both challenges and opportunities for businesses.
darkreading – Read More
Business leaders among Pegasus spyware victims, says security firm
/in General NewsThe mobile security company said it detected Pegasus spyware attacks on seven iPhone owners, including government officials and a business leader.
© 2024 TechCrunch. All rights reserved. For personal use only.
Security News | TechCrunch – Read More
A New Phone Scanner That Detects Spyware Has Already Found 7 Pegasus Infections
/in General NewsThe mobile device security firm iVerify has been offering a tool since May that makes spyware scanning accessible to anyone—and it’s already turning up victims.
Security Latest – Read More
Digital Certificates With Shorter Lifespans Reduce Security Vulnerabilities
/in General NewsProposals from Google and Apple drastically reduce the life cycle of certificates, which should mean more oversight — and hopefully better control.
darkreading – Read More